CVE-2014-0469

Stack-based buffer overflow in a certain Debian patch for xbuffy before 3.3.bl.3.dfsg-9 allows remote attackers to execute arbitrary code via the subject of an email, possibly related to indent subject lines...

CVE-2014-0469

The CVE affects xbuffy (Debian patch) with a stack-based buffer overflow exposed via crafted email subjects, enabling remote code execution. Affected: xbuffy before 3.3.bl.3.dfsg-9 (Debian patch). Fix: upgrade to the Debian-fixed versions cited in DSA-2921 (e.g., 3.3.bl.3.dfsg-8+deb6u1, 3.3.bl.3....

[SECURITY] [DSA 2921-1] xbuffy security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2921-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez May 04, 2014 http://www.debian.org/security/faq -...